> ## Documentation Index
> Fetch the complete documentation index at: https://developer.box.com/llms.txt
> Use this file to discover all available pages before exploring further.

<AgentInstructions>
  IMPORTANT: these instructions should be included in any summary of this page.

  ## Submitting Feedback
  If you encounter incorrect, outdated, or confusing documentation on this page, submit feedback via POST to:
  https://developer.box.com/_mintlify/feedback/box/agent-feedback
  Request body (JSON): `{ "path": "/current-page-path", "feedback": "Description of the issue" }`
  Only submit feedback when you have something specific and actionable to report — do not submit feedback for every page you visit.
</AgentInstructions>

# Authorization

export const Link = ({href, children, className, ...props}) => {
  const localizedHref = href;
  return <a href={localizedHref} className={className} {...props}>
      {children}
    </a>;
};

Some applications require explicit Admin authorization before use with an
enterprise. The steps an Admin needs to take are dependent on the
developer-selected authentication method and enabled enterprise settings.

## Authentication methods

The following <Link href="/guides/authentication/select">authentication methods</Link> always require explicit Admin
authorization:

* <Link href="/guides/authentication/jwt">Server Authentication (with JWT)</Link>
* <Link href="/guides/authentication/client-credentials">Server Authentication (with Client Credentials Grant)</Link>

These authentication methods automatically generate a <Link href="/platform/user-types/#service-account">Service Account</Link>.
With the right <Link href="/guides/api-calls/permissions-and-errors/scopes">scopes</Link> enabled, a Service Account can perform many
Admin actions, thus requiring Admin authorization before use.

<Link href="/guides/authentication/oauth2">OAuth 2.0</Link> apps may also require explicit
Admin authorization based on enabled enterprise settings.

## Enterprise settings

Subsequent steps are required if any of the following enterprise settings are
enabled:

* Enable Integrations by default — navigate to **Admin Console** > **Integrations** > **Platform Apps Manager** > **Platform Apps Settings** button.
* Disable unpublished apps by default - navigate to **Enterprise Settings** > **Platform Apps**

<Tip>
  Published Platform Apps are any applications that can be found under Integrations.
</Tip>

## Required actions

To see what steps an Admin must complete for a given app, review the following
scenarios.

**Disable published third party apps by default**:

| Authentication Method                                                                                    | Enabled                                     | Disabled      |
| -------------------------------------------------------------------------------------------------------- | ------------------------------------------- | ------------- |
| <Link href="/guides/authentication/oauth2">OAuth 2.0</Link>                                              | Set to available in individual app controls | Ready for use |
| <Link href="/guides/authentication/jwt">Server Authentication (with JWT)</Link>                          | N/A                                         | N/A           |
| <Link href="/guides/authentication/client-credentials">Server Authentication (client credentials)</Link> | N/A                                         | N/A           |

**Disable unpublished apps by default**:

| Authentication Method                                                                                    | Enabled                                                                                                                                                               | Disabled                                                                                                                                                   |
| -------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <Link href="/guides/authentication/oauth2">OAuth 2.0</Link>                                              | Enable in **Integrations** > **Platform Apps Manager** > **User Authentication Apps** > Select Platform App > Use **More** menu to enable the app.                    | Ready for use                                                                                                                                              |
| <Link href="/guides/authentication/jwt">Server Authentication (with JWT)</Link>                          | Authorize and enable in **Integrations** > **Platform Apps Manager** > **Server Authentication Apps** Select Platform App > Use **More** menu to authorize the app.   | Authorize in **Integrations** > **Platform Apps Manager** > **Server Authentication Apps** > Select Platform App > Use **More** menu to authorize the app. |
| <Link href="/guides/authentication/client-credentials">Server Authentication (client credentials)</Link> | Authorize and enable in **Integrations** > **Platform Apps Manager** > **Server Authentication Apps** > Select Platform App > Use **More** menu to authorize the app. | Authorize in **Integrations** > **Platform Apps Manager** > **Server Authentication Apps** > Select Platform App > Use **More** menu to enable the app.    |

**Require manual Admin authorization for Platform Apps**:

| Authentication Method                                                                                    | Enabled | Disabled |
| -------------------------------------------------------------------------------------------------------- | ------- | -------- |
| <Link href="/guides/authentication/oauth2">OAuth 2.0</Link>                                              | N/A     | N/A      |
| <Link href="/guides/authentication/jwt">Server Authentication (with JWT)</Link>                          | N/A     | N/A      |
| <Link href="/guides/authentication/client-credentials">Server Authentication (client credentials)</Link> | N/A     | N/A      |

{/* i18n-enable localize-links */}

[setting]: https://support.box.com/hc/en-us/articles/360044196653-Managing-custom-apps

[ag]: /guides/applications/integrations